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AMENDMENTS TO THE CLAIMS 

This listing of claims will replace all prior versions and listings of claims in the 
application: 

LISTING OF CLAIMS: 

1-26. (canceled). 

27. (currently amended) An information storage management system in a first 
administrative domain administered by a first organization , comprising: 
a collection of stored objects; 

an access control unit for determining if a requestor is authorized to access a protected 
object stored in the collection; 

a resource manager connected to the access control unit and to a communications 
channel; 

wherein the resource manager receives a user's request for access to the protected object, 
the request including a globally unique identifier for the user requesting the access, and in 
response to the user's request the resource manager sends over the communications channel to 
an external storage management system in a second administrative domain administered by a 
second organization that is different from the first organization, a resource manager request for 
information about the user, the resource manager request including the globally unique identifier; 
and 
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wherein the resource manager upon receiving a response to the resource manager request 
including us e r information about th e us e r from the external storage management system passes 
the user information to the access control unit; and 

wherein responsive to the bas e d on tho user information the access control unit 
determines whether to authorize the user for g rant the subject access to the protected object. 

28. (Original) The information storage management system of claim 27, wherein the 
globally unique identifier is a Universal Unique Identifier (UUID). 

29. (Original) The information storage management system of claim 27, wherein the user 
information is organization information indicating whether the user is a member of an 
organization. 

30. (currently amended) An information storage management system in a first 
administrative domain administered by a first organization , comprising: 

a collection of stored objects; 

an access control unit for determining if a requestor is authorized to access a protected 
object stored in the collection; 

a resource manager connected to the access control unit and to a communications 
channel; 
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wherein the resource manager receives a user's request for access to the protected object, 
the request including a globally unique identifier for the user requesting the access, and in 
response to the user's request the resource manager resolves the globally unique identifier to a 
user identifier recognized by an external storage management system in a second administrative 
domain administered by a second organization that is different from the first organization, : the 
resource manager sending to the external storage management system a resource manager 
request for information about the user, the resource manager request including the resolved user 
identifier; and 

wherein the resource manager upon receiving a response to the resource manager request 
including us e r information about th e user from the external storage management system p asses 
the user information to the access control unit; and 

wherein responsive to bas e d on the user information the access control unit determines 
whether to grant th e subject authorize the user for access to the protected object. 

31. (Original) The information storage management system of claim 30, wherein the 
globally unique identifier is a Universal Unique Identifier (UUID). 

32. (Original) The information storage management system of claim 30, wherein the user 
information is organization information indicating whether the user is a member of an 
organization. 
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33. (Original) The information storage management system of claim 30, wherein the 
resource manager resolves the globally unique identifier by using a name server. 

34-46. (canceled). 
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